Privacy Policy

Last updated: November 9, 2026. The Arabic text prevails.

1. Who controls your data

The controller is PNEUMA GENERAL TRADING L.L.C - O.P.C, Abu Dhabi, United Arab Emirates, the provider of Maalesh. Contact: privacy@nomaalesh.com.

2. What stays on your phone

People, birthdays, photos, details, tasks, appointments, money, the home list, chat wallpapers, your recorded voice, duties, occasions, wish lists and gift pools stay on your phone only. Importing birthdays from contacts and showing your photos from this day in past years happen on your phone only. They do not reach us.

3. What we collect when you create an account

• Your email: required to sign in.
• Your phone number: optional, kept private to your account and shown to nobody. You can change or remove it in your profile.
• The name you entered: required, shown to your friends and group members.
• Your messages, photos and videos: when you send them, to deliver them.
• Your profile photo and stories: seen by people you chat with. Stories disappear after 24 hours, and their file is deleted from our servers when you next open the app.
• Your birthday: optional. If you choose to share it, only people you chat with see it.
• Links you share: when you make a link for a wish list or a gathering, we keep its title, the gift or dish names, the time and place, and the answers. Anyone with the link can see them, and the answers reach you in the app.
• A scheduled voice wish: kept until it is posted in the chat you chose.
• Groups, invites, friend code, blocked people, reports, support messages, and when you accepted the terms.

An account is required to use the app. We remove location data from photos and videos before upload. When you invite someone from your contacts, your phone opens a message to them. Their number and your contacts never reach us.

4. Why we use it, and our legal basis

To provide the service you asked for, with your consent at sign-up, to protect users and review reports, and to comply with the law. We do not sell your data, use it for ads, track you, or send marketing without your consent.

5. Who can see your data

Your friends and group members see your name, profile photo and stories, and the messages of the chats you share. Connections are encrypted in transit and access rules protect your data, but messages are not end-to-end encrypted. We read a reported message, story or file to review it, and may disclose data if the law or an authority requires it.

6. Service providers and transfers

• Supabase: database and photo storage, servers in Mumbai, India.
• Resend: sends your sign-in code.
• Apple: subscriptions and payment. We never see your card.

Your data therefore leaves your country to provide the service, limited to what is needed.

7. Retention

A message stays until you delete it, its group is deleted, or you delete your account. Deleting your account removes your profile, messages, photos and stories, shared groups pass to another member, and data on your phone stays. Backups may remain for up to 30 days. Reports and reported files are kept for up to 12 months for safety, unless the law requires longer.

8. Your rights

You may know how your data is processed, access it, get a copy, correct it, have it destroyed, withdraw consent at any time, and object. Delete messages or your account in the app, or email us and we will reply within 30 days. Withdrawing consent ends chat, which depends on this data, and does not affect earlier processing. You may complain to the authority in your country, such as SDAIA in Saudi Arabia.

9. Security

We use suitable technical measures, but no system is fully secure. If a breach could harm you, we will tell you and the authorities as the law requires.

10. Children

The app is for people aged 18 or over. We do not knowingly collect children's data and will delete it if we learn of it.

11. Other people's data

What you record about others stays on your phone for your personal use. Do not send others' data or photos in chat without the right to do so.

12. If you answer a link

If you open a link from a Maalesh user and answer it, we keep the name you typed and your answer. The link owner and anyone with the link can see them. They stay until the owner deletes their account; to remove them sooner, email privacy@nomaalesh.com.

13. Changes

We update the date above when this policy changes, and tell you in the app if the change is material.